App Access Policy - Block .exe rules do not include subfolders

Hi,

I am trying to create a Policy via the console to block all executables (exe) from running when it is in a folder and all it's subfolders.

My application contol rule looks like this:

%userprofile%\desktop\*

This should block everything contained within the desktop folder, including everything in subfolders, but it only blocks executables inside the root of the desktop folder. Can we extend this rule to every subfolder without having to make the policy look like this:

%userprofile%\desktop\*\*

%userprofile%\desktop\*\*\*

%userprofile%\desktop\*\*\*\*

etc, etc